Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
File: ZhaRypxY0IWba4cCMLD1gb5mpYo.mft (raw, json)
Hash identifier: b6on2PU0vNeAA6NjYA1H4tYTr5pfgH9rPuq2ykJDL04=
Subject key identifier: F0:DF:79:C3:AA:CC:E3:88:2F:DE:80:A1:EC:FF:34:56:D3:35:ED:26
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 0196B7EC87C711D00E0612084B6AA1D047AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
Manifest number: 0E8E
Signing time: Sat 10 May 2025 02:00:53 +0000
Manifest this update: Sat 10 May 2025 02:00:53 +0000
Manifest next update: Sun 11 May 2025 02:00:53 +0000
Files and hashes: 1: Rq-lqv8nvaGlsC79el8fMA5_1rc.roa (hash: T0ctud47vtW/7aXgZpP0x6VHkVLrf38PbYskxMdhNRg=)
2: X_fPOs6YAZH2TT4IWQcW6KOL-FY.roa (hash: bxGSJtgvXh/lnDA0x6ePZz0W8ihJege1t3FViWTKXLY=)
3: ZhaRypxY0IWba4cCMLD1gb5mpYo.crl (hash: lG5K5UdyVUXoaJ6RsMs31T9QfndT7lp3ORhoOgYiOIE=)
4: byX4XqUIEmVjtSF74Vja9liWXww.roa (hash: 6RlIk6GXgp36HBDBBcA87k4kHMHfV998BVRCjiswL3U=)
5: z7EntH2_RgrImndWaf9CHwQF-tM.roa (hash: At0xjBHWEf4xXBr9D4SeVUGhACOqx602brOEncq8KCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:87:c7:11:d0:0e:06:12:08:4b:6a:a1:d0:47:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: May 10 02:00:53 2025 GMT
Not After : May 11 02:00:53 2025 GMT
Subject: CN=f0df79c3aacce3882fde80a1ecff3456d335ed26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d1:03:b9:0c:1d:1b:5b:2e:c8:e9:a6:11:06:
ba:2d:29:0c:35:ee:40:ea:03:46:49:57:81:ba:29:
86:03:a8:2b:6f:26:8d:63:3f:ac:45:11:73:11:e7:
26:44:74:9f:10:77:63:28:85:a4:c7:f3:40:7b:35:
76:51:f4:41:b2:3c:14:b2:7c:0f:33:ea:02:46:12:
e0:dd:8a:32:bd:cd:68:b3:35:e8:59:41:c9:4a:bf:
aa:62:85:ea:81:fb:f2:e9:d6:da:bf:f5:9b:5f:47:
cd:13:e2:75:78:a2:4c:7d:5d:ac:4f:b0:ed:ca:c1:
d8:84:a7:f2:18:41:a8:a5:06:be:26:15:a6:cd:a3:
24:50:74:20:99:b7:93:47:c4:fe:fb:51:4a:5d:35:
f6:91:20:2b:7e:05:39:72:3d:73:56:88:c5:28:59:
ff:0b:9a:0d:f1:68:25:2c:12:94:84:38:66:ac:17:
19:a0:b9:57:33:93:d4:06:8d:f8:d6:0c:49:c7:31:
cf:e1:c5:7b:16:18:05:6b:26:42:33:d3:18:95:a9:
69:ce:8c:9a:ec:90:3a:ec:4e:06:ab:34:e9:9a:45:
3a:00:4d:b4:5d:1c:aa:dc:43:4a:50:35:35:cf:cf:
ae:70:90:6b:f9:6c:7b:fa:d1:e8:11:5e:b0:e6:ed:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DF:79:C3:AA:CC:E3:88:2F:DE:80:A1:EC:FF:34:56:D3:35:ED:26
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2c:d6:80:b9:aa:4f:02:a9:ba:09:94:4e:84:44:0d:5a:e0:
1a:d9:a3:17:b5:5d:21:53:9f:46:78:7e:0b:d7:b1:88:ad:38:
ee:91:88:25:b8:51:0c:7c:29:1c:2c:e2:a2:4c:86:3a:32:65:
e6:89:60:07:d1:28:bb:bc:f5:1a:8a:e6:94:e5:61:6e:9d:03:
43:36:39:4a:44:25:e4:b4:23:ae:01:dc:88:d2:48:b3:91:a9:
3e:11:48:1b:a5:20:9c:59:18:c5:e3:62:24:37:98:e1:6e:b8:
b1:8b:04:8a:3b:00:53:87:50:8d:c8:10:ed:01:ce:5a:0a:40:
1b:a2:03:b3:0c:2e:ef:df:cd:a2:88:cb:fa:70:56:c9:c7:50:
81:de:6c:4d:e3:cf:fe:c0:a2:14:64:de:06:93:2b:01:68:dd:
ef:47:42:16:76:92:73:a0:4c:23:8d:47:95:62:ad:4d:41:bc:
43:a0:d0:a5:3e:46:ff:0c:81:a0:4f:6b:8f:34:36:98:05:d7:
76:bf:c1:dc:b6:9a:0e:10:5a:ab:0d:f9:e1:9c:1a:3a:95:d2:
c9:93:a9:7b:60:2b:b3:38:85:cb:4e:61:32:ee:64:f4:37:97:
79:88:73:6c:99:64:df:cc:04:06:d5:fd:b6:d5:08:d7:87:50:
f5:46:35:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:17:48 2025 by rpki-client